####################################################### # Exploit Title : Tesla Arabic SQL Injection # Date : 11/03/2018 # Exploit Author: Ozan Agdepe # Email: agdepeozan[at]gmail[dot]com # Author Twitter: twitter.com/OAdepe # # # Google Dork : intext: كهربائي php?id= # Tested On: Kali Lİnux & Windows 7-8-9-10 ####################################################### # Description: # An attacker can exploit this vulnerability to read from the database. # The vulnerability allows an attacker to inject sql commands.... ####################################################### #DEMO's: # http://www.tunesoman.com/product.php?id=200[SQL] # http://www.bpc.gov.bd/contactus.php?id=13[SQL] # https://www.fleurlis.com.tw/en/scene.php?cid=1&id=2[SQL] # http://www.avenued.com/europe/merchandise/index.php?ID=48[SQL] # http://www.ritii.com/en/product.php?CID=230[SQL] ##################################################### # # We are Turkish Cyber Security Researchers. Follow Me :) # Twitter.com/OAdepe